CVE-2022-1123 Leaflet Maps Marker < 3.12.5 - Admin+ SQLi

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks...

CVE-2022-1123

CVE-2022-1123 affects the WordPress plugin Leaflet Maps Marker prior to version 3.12.5. The issue is improper sanitization of certain parameters before they are inserted into SQL queries, enabling SQL injection by high-privilege users (no user interaction required). The vulnerability is documente...

PT-2022-13672 · WordPress · Leaflet Maps Marker

Name of the Vulnerable Software and Affected Versions: Leaflet Maps Marker WordPress plugin versions prior to 3.12.5 Description: The issue concerns the improper sanitization of certain parameters before they are inserted into SQL queries. This could allow high privilege users to perform SQL...

WordPress plugin Leaflet Maps Marker SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Leaflet Maps Marker Google...

WordPress Leaflet Maps Marker plugin <= 3.12.4 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Ihor Bliumental in WordPress Leaflet Maps Marker plugin versions = 3.12.4. Solution Update the WordPress Leaflet Maps Marker plugin to the latest available version at least 3.12.5...

Leaflet Maps Marker < 3.12.5 - Admin+ SQLi

The plugin does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks. PoC PoC for filter-operator1 parameter: POST...

WordPress Leaflet Maps Marker Pro Plugin - Multiple Vulnerabilities

This plugin is prone to SQL injection, cross site scripting, shell upload and file deletion vulnerabilities. Solution Update the plugin...

Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities

The Leaflet Maps Marker Google Maps, OpenStreetMap, Bing Maps WordPress plugin was affected by a Two SQL Injection Vulnerabilities security vulnerability...

Leaflet Maps Marker Pro - SQLI, XSS, Shell Upload, file delete

The leaflet-maps-marker-pro WordPress plugin was affected by a SQLI, XSS, Shell Upload, file delete security vulnerability...

Leaflet Maps Marker - Multiple security issues

The mapsmarker WordPress plugin was affected by a Multiple security issues security vulnerability...

Wordpress Plugins - leaflet maps marker Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

WordPress Leaflet Maps Marker Plugin 0.0.1 - "id" Parameter XSS

WordPress Leaflet Maps Marker plugin's "id" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can stea...

WordPress Plugin Leaflet Maps Marker 0.0.1 - leaflet_layer.php?id Cross-Site Scripting

WordPress Plugin Leaflet Maps Marker 0.0.1 - leafletlayer.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/53526/info The Leaflet plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...